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□ Since this application is in condition for allowance except for formal matters, prosecution as to the merits is closed 
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DETAILED ACTION 



Claim Rejections - 35 USC§102 



1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless -- 

(e) the invention was described in a patent granted on an application for patent by another filed in the United 
States before the invention thereof by the applicant for patent, or on an international application by another who 
has fulfilled the requirements of paragraphs (1), (2), and (4) of section 371(c) of this title before the invention 
thereof by the applicant for patent. 

2. Claims 1-8 & 1 1-18 are rejected under 35 U.S.C. 102(e) as being anticipated by Schloss 
(5,706,507). 

3. As to claim 1, Schloss discloses: 

a. one or more web servers having electronic versions of documents available by request 
where content servers are deemed to be document servers; See Figs. 1-2; 

b. a search engine having access to access control lists for documents on the web servers, 
the access control list linking authorized users with all documents permitted for each authorized 
user, whereby documents found in a search are screened with the list to determine the documents 
for which a user performing a search has access; See Figs. 3-4, 5C, 7 & 1 1 ; Abstract; 5:45-67; 
6:1-67; 7:1-25; 8:40-54. 
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4. As to claim 2, Schloss discloses: 

a. means for forwarding to the user only those document titles compatible with the 
authorized acess of the user; See Abstract; 7:1-25; 8:40-54. 

5. As to claim 3, Schloss discloses: 

a. a communications link between a query server connected to the search engine; See Figs. 
1-2; and 

b. access control lists (advisory servers) associated with the web servers; See Figs. 1-2. 

6. As to claim 4, Schloss iscloses: 

a. executing a query on a query server having access to a document index of documents 
available for searching on document servers by a person having a unique identification code 
without regard to access control limitations, yeilding a list of all relevant documents having a 
unique URL wherein it is deemed that persons having a unique id for access during the time 
blocked periods would also use the system as described for other access; See Figs. 4 & 9B; 
Abstract; 4:1-21; 1 1:1-55; 7:1-25; 

b. reviewing all URLs after the search is executed using an access control list associated 
with each document server to check whether each URL is compatible with the access level of the 
identfication code of the person executing the query wherein parents and children are deemed to 
have different access levels, See Abstract; 1 1 : 1-55; and 
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c. delivering only those documents whose URL is compatible with the access level of the 
person; See Abstract; 7:1-25; 8:40-55. 

7. As to claim 5, Schloss discloses: 

a. providing a data link between the query server and access control lists for associated 
web servers wherein the access control list is deemed to be on the advisory server; See Figs. 1-2, 
& 6; 4:57-67. 

8. As to claim 6, Schloss discloses: 

a. storing the access control list separately from the index of documents wherein the index 
of documents are deemed to be on the content server; See Figs. 1-2 & 6; 5:1-52. 

9. As to claim 7, Schloss discloses: 

a. storing the access control list separately from the index of documents wherein the 
access control list is deemed to be on the advisory server and the index of documents is deemed 
to be on the ; See Figs. 1-2 & 6; 2:37; 4:47-67; 5:1-52. 
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10. As to claim 8, Schloss discloses: 

a. implementing access control with partial URLs indicating the heirarchy of documents to 
which a person with a unique identification code has access wherein a fuzzy match is deemed to 
be a partial URL; See 7:5-44. 

11. As to claim 1 1 , Schloss discloses: 

a. wherein a single access control list is provided for all document servers wherein it is 
deemed that one access (advisory) server can be used for all document servers; See Figs. 1-2; 5:1- 
67; 6:1-67. 

12. As to claim 12, Schloss discloses: 

a. wherein an access control list is provided for each document server wherein it is deemed 
that an access server can be provided for each document servers (content server); See Figs. 1-2; 
5:1-67; 6:1-67. 

13. As to claim 13, Schloss discloses: 

a. a plurality of document servers, each having a unique URL, each document server 
having an access control list defining user identification and for each user identificiation listing 
URLs for which access is permitted or denied wherein each document server's access control is 
deemed to be an access server (advisory server); See Figs. 1-2; and 
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b. executing a query on a query server having access to a document index of documents 
available for searching on the document servers by a person having one of said identification 
codes; See previous responses; and 

c. producing only those documents whose URL is compatible with the access level of the 
identification code of the person; See previous responses. 

14. As to claim 14, Schloss discloses: 

a. wherein the URLs are expressed in HTTP protocol; See 4:30-56. 

15. As to claim 1 5, Schloss discloses: 

a. wherein each access control list lists URLs for each user identification number with a 
hierarchical indication of documents for which access is permitted or denied wherein the URL is 
deemed to provide a heirarchical indication of documents; See 5:40-67; 6:1-67; Figs. 4, 5C ? & 
9B. 



16. As to claim 16, Schloss discloses: 

a. wherein hierarchical indication is by partial URLs; See Figs. 4, 5C, & 9B; 7:1-44. 
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17. As to claim 17, Schloss discloses: 

a. accessing the access control list by the filesystem of the query server; See Figs. 1-2 & 4; 
5:1-67; 6:1-67. 

18. As to claim 1 8, Schloss discloses: 

a. accessing the access control list by a file transfer protocol wherein HTTP is deemed to 
be a file transfer protocol and the browsers also have a file transfer protocol; See 4:1-67. 

Claim Rejections - 35 USC § 103 

19. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

20. Claim 19 is rejected under 35 U.S.C. 103(a) as being unpatentable over Schloss '507. 

21. As to claim 1 9, Schloss discloses the claimed invention except for confirming access to 
the access control list by a script message from a document server. It would have been obvious to 
one having ordinary skill in the art at the time the invention was made to confirm access to the 
access control list by a script message from a document server since it was known in the art that 
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restricting access usually provides a message when access is restricted and providing a message 
when access is successful for the purpose of informing the user of his/her accessibility to data is 
helpful to the user when restricting access. 

22. Claims 9-10 are rejected under 35 U.S.C. 103(a) as being unpatentable over Schloss '507 
in view of Kirsch (5,751,956). 

23. As to claim 9, Schloss discloses the claimed invention except for implementing access 
control with a common gateway interface script. Kirsch teaches that it is known to implement 
access control with a common gateway interface script as set forth at column 2, lines 49-67 and 
column 3, lines 1-65. It would have been obvious to one having ordinary skill in the art at the 
time the invention was made to implement access control with a common gateway interface script, 
as taught by Kirsch in order to allow a small program to be executed by a server in response to a 
client URL request. 

24. As to claim 1 0, the modified invention of Schloss discloses: 

a. wherein said common gateway interface scripts returns a message to the query server 
indicating URLs to which a person with a unique identification code has access; See Kirsch:28- 
67. 
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Conclusion 

25. Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Charles Rones whose telephone number is (703) 306-3030. The examiner 
can normally be reached on Monday through Thursday from 8 a.m. to 4 p.m. EST. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Thomas Black, can be reached on (703) 305-9707. 

Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks 
Washington, D.C. 20231 
or faxed to: 

(703) 308-9051, (for formal communications intended for entry) 

Or: 

(703) 305-9731 (for informal or draft communications, please label 
"PROPOSED" or "DRAFT") 

Hand-delivered responses should be brought to Crystal Park II, 2121 Crystal Drive, 
Arlington. VA., Sixth Floor (Receptionist). 



Any inquiry of a general nature or relating to the status of this application or proceeding should be 
directed to the Group receptionist whose telephone number is (703) 305-3900. 




